This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0097DB5ECE9511F0A36D1F98DAE4EC9C.roa
File:                     0097DB5ECE9511F0A36D1F98DAE4EC9C.roa (raw, json)
Hash identifier:          QbKlCxJ+Kb/l5z8gF/Yv+c17IEg3xl/JsHWTN8fDRps=
Subject key identifier:   03:D2:84:50:03:1C:16:07:95:CB:87:33:26:81:74:FA:8F:74:23:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0097DB5ECE9511F0A36D1F98DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 09:06:21 +0000
ROA not before:           Mon 01 Dec 2025 09:06:14 +0000
ROA not after:            Wed 31 Dec 2025 09:06:14 +0000
asID:                     44559
IP address blocks:        45.196.140.0/24 maxlen: 24
                          45.196.141.0/24 maxlen: 24
                          45.196.142.0/24 maxlen: 24
                          45.196.143.0/24 maxlen: 24
                          45.196.152.0/24 maxlen: 24
                          45.196.198.0/24 maxlen: 24
                          45.196.199.0/24 maxlen: 24
                          45.202.119.0/24 maxlen: 24
                          45.202.125.0/24 maxlen: 24
                          45.202.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101017 (0x18a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 09:06:14 2025 GMT
            Not After : Dec 31 09:06:14 2025 GMT
        Subject: CN=692d5a8d-da69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:12:8a:24:72:d3:a5:ae:97:e9:2c:7f:cd:
                    27:13:60:8d:6d:34:00:0f:cd:04:47:22:f7:95:c3:
                    ac:1f:8c:0f:ce:29:d2:a2:b0:14:51:4c:be:3d:4c:
                    9a:74:20:97:dc:7c:55:07:87:00:cb:d9:78:6a:1b:
                    ee:fa:1b:fc:6b:10:dd:27:bc:b7:0c:73:8e:82:7f:
                    10:e2:e2:48:17:60:5a:7b:27:88:61:45:78:fa:3c:
                    8e:68:76:53:67:03:8e:4f:8a:74:29:43:66:2a:5a:
                    3a:d5:f4:5d:00:12:ee:2f:57:6c:9d:ee:15:9c:35:
                    db:b2:8a:2e:6b:8a:ae:d1:dc:b5:83:96:b4:58:7c:
                    7f:75:a5:bf:ae:4f:6c:6e:61:50:43:c6:28:ba:15:
                    1b:e7:5b:2a:f1:71:37:cc:9f:7d:3f:7c:81:eb:13:
                    13:3b:a4:11:0a:0e:69:88:15:01:d9:de:ce:21:f8:
                    43:50:4d:6a:e8:0b:6f:c4:0f:6e:59:35:6f:10:f1:
                    24:6a:6e:88:a1:20:f8:20:e6:f1:3f:f8:49:29:13:
                    31:1c:d3:9f:15:48:77:84:7d:e9:00:ca:f1:7e:1b:
                    c6:08:b7:40:66:34:72:c5:5b:bc:e9:06:b6:8c:5a:
                    54:23:d4:f2:67:36:2d:a7:c2:fd:3d:3d:66:c8:a2:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:84:50:03:1C:16:07:95:CB:87:33:26:81:74:FA:8F:74:23:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0097DB5ECE9511F0A36D1F98DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.140.0/22
                  45.196.152.0/24
                  45.196.198.0/23
                  45.202.119.0/24
                  45.202.125.0/24
                  45.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:bb:0a:21:26:e3:02:c0:0a:c2:09:90:27:ac:57:2d:5e:
         65:f7:2d:05:81:f3:e5:ba:89:71:d0:ef:bf:09:58:57:6b:ee:
         ec:5c:06:a9:11:04:ca:60:59:40:c8:8a:e9:48:1c:03:7a:5c:
         2f:bd:a1:26:1f:0e:82:b0:96:ff:03:cd:7c:67:de:20:48:3e:
         4a:23:ec:01:3b:a3:82:6c:be:c2:02:86:ff:c2:02:54:b7:17:
         6f:80:da:3c:26:84:d9:03:34:35:37:bf:40:37:92:86:85:c5:
         c9:59:6a:89:01:82:21:49:9c:8f:1f:cc:68:de:b2:87:41:9f:
         3d:e3:05:d7:2c:aa:37:b0:8c:fe:6d:ee:ea:58:f7:72:4b:16:
         e0:76:65:2a:49:d7:96:85:2f:49:e0:a6:81:69:dc:a9:50:03:
         ab:56:20:df:ee:cc:07:7d:26:cc:bd:ba:6f:d7:fb:af:0e:08:
         da:b2:a6:f3:57:d1:56:46:f8:d7:fc:76:9c:6b:68:37:58:79:
         f6:a9:86:72:1f:4c:85:f5:b3:88:90:7a:b0:36:70:22:57:6b:
         21:32:eb:9e:a2:5c:6a:32:a4:85:c6:de:92:0a:6f:f4:8c:57:
         72:49:19:dd:3d:78:3e:ad:ff:3a:90:c1:42:d3:49:4f:29:d7:
         e7:15:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:20 2025 by rpki-client